{"id":1610,"date":"2026-02-18T02:10:26","date_gmt":"2026-02-18T02:10:26","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/ai-model-extraction-gemini-attacks"},"modified":"2026-02-18T02:10:26","modified_gmt":"2026-02-18T02:10:26","slug":"ai-model-extraction-gemini-attacks","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks","title":{"rendered":"AI Model Extraction: Gemini Hack Insights"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">Recent reports of hackers hammering Google\u2019s Gemini with massive prompt barrages are being misread as simple jailbreaks. This isn&#8217;t about making the model say embarrassing things; it\u2019s a systematic attempt at <strong>model extraction<\/strong>\u2014cloning an AI&#8217;s behavior and stealing its intellectual property through its public API. The incident marks a critical escalation in adversarial AI, shifting the battleground from content safety filters to the fundamental defense of AI as a core asset.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Have you ever wondered if the tools we build to share knowledge could end up giving it all away? That&#8217;s the uneasy feeling here.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What happened:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers are reportedly targeting Google&#8217;s Gemini API with high-volume, structured prompts. The goal isn&#8217;t just to bypass safety restrictions but to map the model&#8217;s input-output behavior &#8211; effectively creating a distilled, cheaper version, what some call &#8220;black-box model extraction.&#8221; I&#8217;ve seen similar patterns in other security reports, and it always raises the same quiet alarm.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why it matters now:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This moves beyond a simple PR problem into a direct threat to the core business model of every major AI lab (Google, OpenAI, Anthropic, Meta). If a multi-billion dollar model can be effectively cloned for a fraction of the cost via its own API, well, the entire economic foundation of the generative AI market starts to wobble &#8211; and that&#8217;s no small thing, really.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Who is most affected:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">AI vendors, whose valuable model IP is exposed, and enterprise customers, who rely on the security and integrity of these third-party APIs. This forces a new level of due diligence beyond just uptime and performance, zeroing in on a vendor&#8217;s ability to prevent model exfiltration. It&#8217;s like realizing your front door needs more than a sturdy lock.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The under-reported angle:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Most coverage conflates this with &#8220;prompt injection.&#8221; But here&#8217;s the thing &#8211; the real story is the economic calculus: is it cheaper to bombard an API with millions of queries to distill its &#8220;knowledge&#8221; than to train a comparable model from scratch? This incident is a live stress test of that very question, and the defensive capabilities of today&#8217;s LLM infrastructure. From what I&#8217;ve observed in the field, these tests often expose cracks we didn&#8217;t even know were there.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83e\udde0 Deep Dive<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ever catch yourself scrolling through headlines about AI &#8220;hacks&#8221; and think, wait, is this really as straightforward as it sounds? The news cycle is buzzing with claims that hackers are trying to &#8220;steal&#8221; Google&#8217;s Gemini model. While the phrase grabs attention &#8211; and who can blame it? &#8211; it obscures a more precise, and frankly troubling, reality.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The attacks aren&#8217;t about downloading the model&#8217;s weights; they&#8217;re about reverse-engineering its intelligence. This technique, known in security circles as <strong>black-box model extraction<\/strong>, uses a barrage of prompts to create a massive dataset of inputs and outputs. An attacker can then use this dataset to train a smaller, cheaper &#8220;student&#8221; model that mimics the behavior of the original &#8220;teacher&#8221; model &#8211; a process called <strong>knowledge distillation<\/strong>. It&#8217;s methodical, almost surgical, in how it peels back the layers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This threat is fundamentally different from a &#8220;jailbreak&#8221; or prompt injection. A jailbreak aims to trick a model into violating its safety policies for a single response &#8211; quick and contained. Model extraction, though? That&#8217;s a systematic campaign to clone the model&#8217;s entire reasoning and stylistic capability. It treats the LLM&#8217;s API not as a conversational partner, but as an oracle whose secrets can be siphoned off one query at a time. The reports on Gemini serve as a public warning shot to the entire industry: your public endpoints are now a primary surface for intellectual property theft. That shift alone changes everything.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The critical question for both attackers and defenders is one of economics &#8211; plain and simple. Is this even feasible? Cloning a frontier model with high fidelity would require an immense number of queries, potentially running into millions of dollars in API costs. That said, attackers may not need perfect replication. A distilled model that is 80% as good for 1% of the training cost could be a massive commercial threat &#8211; plenty of reasons to worry there. AI labs are now in a silent arms race, trying to make the cost of extraction prohibitively higher than the value of the cloned model. It&#8217;s a cat-and-mouse game, escalating quietly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This forces a paradigm shift in AI security, moving beyond content moderation to robust API defense. A true defense-in-depth architecture is no longer optional &#8211; it&#8217;s essential. This includes sophisticated <strong>rate limiting<\/strong> and anomaly detection to spot extraction patterns, deploying honey prompts and &#8220;canary&#8221; phrases to identify bad actors, and exploring output perturbation techniques that add noise to responses without degrading user experience. Security frameworks like <strong>MITRE ATLAS<\/strong> are being adapted to map these new attack chains, formalizing a threat that was theoretical just a year ago. For AI vendors, the moat is no longer just the quality of their model, but the strength of the fortress they build around it &#8211; and building that takes time, ingenuity, a bit of trial and error.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udcca Stakeholders &amp; Impact<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">AI \/ LLM Providers (Google, OpenAI, Anthropic)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Impact: High<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Insight: This is an existential threat to IP. It forces them to engineer sophisticated API defenses (rate limiting, behavioral analysis, watermarking) beyond simple safety filters, treating the deployed model as a protectable asset.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Security Teams &amp; CISOs<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Impact: High<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Insight: The LLM API is redefined as a primary attack surface for IP exfiltration. It requires new threat models, monitoring for novel abuse patterns (e.g., high-entropy prompts at scale), and incident response playbooks for model theft attempts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Enterprise Customers<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Impact: High<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Insight: Vendor risk assessment must now include a vendor&#8217;s &#8220;anti-extraction posture.&#8221; Relying on an API that is vulnerable to cloning creates significant supply-chain and IP risk for products built on top of it.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Regulators &amp; Policy<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Impact: Medium<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Insight: This tests the limits of current legal frameworks. It raises questions about whether API Terms of Service (ToS) against scraping are a sufficient deterrent and if new IP protections are needed for the &#8220;behavior&#8221; of an AI model.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This analysis is an independent i10x synthesis based on emerging reports and established research in adversarial machine learning and LLM security. It leverages concepts from threat modeling frameworks like MITRE ATLAS to provide a forward-looking perspective for security leaders, AI engineers, and CTOs navigating the rapidly evolving AI threat landscape. Drawing from what I&#8217;ve followed in recent papers and discussions, it aims to cut through the noise a little.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd2d i10x Perspective<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">What happens when the very openness that fuels AI progress starts to undermine it? The Gemini &#8220;prompt hacking&#8221; incident is a sign of AI&#8217;s industrial maturation. The conflict is moving from the lab to the open market, and the new frontline is the API. This signals that the next phase of competition won&#8217;t just be about building more powerful models, but about proving you can defend them as durable economic assets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The unresolved tension is a philosophical one: how do we maintain the open, collaborative spirit that accelerates AI research while simultaneously protecting the multi-billion-dollar investments that make frontier models possible? If every API is a leaky faucet, the incentive to build the next-generation waterworks diminishes &#8211; or at least, that&#8217;s the risk. What we are witnessing is <strong>the collision of AI&#8217;s academic culture with commercial reality<\/strong>, and the outcome will define the architecture of intelligence for the next decade. It&#8217;s a pivotal moment, one worth watching closely.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Explore the real threat behind hackers targeting Google&#8217;s Gemini API: not jailbreaks, but black-box model extraction to clone AI models. Understand impacts on AI vendors, security needs, and economic risks in this in-depth analysis. Learn how to defend against it.<\/p>\n","protected":false},"author":2,"featured_media":1607,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":""},"categories":[18,17,12,28],"tags":[],"companies":[37],"products":[49],"class_list":["post-1610","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-gemini","category-google","category-policy-safety","category-security-defense","company-google","product-gemini"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI Model Extraction: Gemini Hack Insights - i10X News<\/title>\n<meta name=\"description\" content=\"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI Model Extraction: Gemini Hack Insights - i10X News\" \/>\n<meta property=\"og:description\" content=\"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-18T02:10:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"AI Model Extraction: Gemini Hack Insights\",\"datePublished\":\"2026-02-18T02:10:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks\"},\"wordCount\":1278,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/gemini-model-extraction.webp\",\"articleSection\":[\"Gemini\",\"Google\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#respond\"]}],\"dateModified\":\"2026-02-18T02:10:26+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks\",\"name\":\"AI Model Extraction: Gemini Hack Insights - i10X News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/gemini-model-extraction.webp\",\"datePublished\":\"2026-02-18T02:10:26+00:00\",\"description\":\"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/gemini-model-extraction.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/gemini-model-extraction.webp\",\"width\":1344,\"height\":768,\"caption\":\"Abstract representation of AI model extraction, showing two glowing spheres connected by digital waves and circuitry.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/ai-model-extraction-gemini-attacks#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/news.i10x.ai\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Model Extraction: Gemini Hack Insights\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#website\",\"url\":\"https:\\\/\\\/news.i10x.ai\\\/\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/news.i10x.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/news.i10x.ai\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/news.i10x.ai\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Model Extraction: Gemini Hack Insights - i10X News","description":"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks","og_locale":"en_US","og_type":"article","og_title":"AI Model Extraction: Gemini Hack Insights - i10X News","og_description":"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.","og_url":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks","og_site_name":"i10X News","article_published_time":"2026-02-18T02:10:26+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#article","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks"},"author":{"name":"Christopher Ort","@id":"https:\/\/news.i10x.ai\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"AI Model Extraction: Gemini Hack Insights","datePublished":"2026-02-18T02:10:26+00:00","mainEntityOfPage":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks"},"wordCount":1278,"commentCount":0,"publisher":{"@id":"https:\/\/news.i10x.ai\/#organization"},"image":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp","articleSection":["Gemini","Google","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#respond"]}],"dateModified":"2026-02-18T02:10:26+00:00"},{"@type":"WebPage","@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks","url":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks","name":"AI Model Extraction: Gemini Hack Insights - i10X News","isPartOf":{"@id":"https:\/\/news.i10x.ai\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#primaryimage"},"image":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp","datePublished":"2026-02-18T02:10:26+00:00","description":"Hackers target Gemini API for model extraction, not jailbreaks. Learn about AI cloning, economic risks, and defense strategies.","breadcrumb":{"@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/gemini-model-extraction.webp","width":1344,"height":768,"caption":"Abstract representation of AI model extraction, showing two glowing spheres connected by digital waves and circuitry."},{"@type":"BreadcrumbList","@id":"https:\/\/i10x.ai\/news\/ai-model-extraction-gemini-attacks#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/news.i10x.ai\/"},{"@type":"ListItem","position":2,"name":"AI Model Extraction: Gemini Hack Insights"}]},{"@type":"WebSite","@id":"https:\/\/news.i10x.ai\/#website","url":"https:\/\/news.i10x.ai\/","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/news.i10x.ai\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/news.i10x.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/news.i10x.ai\/#organization","name":"i10X","url":"https:\/\/news.i10x.ai\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/news.i10x.ai\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/news.i10x.ai\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/news.i10x.ai\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"}}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/1610","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=1610"}],"version-history":[{"count":1,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/1610\/revisions"}],"predecessor-version":[{"id":4663,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/1610\/revisions\/4663"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/1607"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=1610"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=1610"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=1610"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=1610"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=1610"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}